Steps

Setup the environment

Determine the access policy

Follow Access Policy to decide which teams should have access to the account.

Update the file

Insert the new account to cloud/aws/variables.tf

For production accounts, you should leave team_access empty.

        "accounts" : {
          "nickname" : {
            name = "<ACCOUNT_NAME>"
            email          = "<ACCOUNT_EMAIL>"
            team_access = []
          }
        }

For development accounts, you should add your teams to the team_access field. Look up your team from Division field in your Slack/BambooHR/Okta profile.

        "accounts" : {
          "nickname" : {
            name = "<ACCOUNT_NAME>"
            email          = "<ACCOUNT_EMAIL>"
            team_access = []
          }
        }